$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/5a7f92be-66b2-3204-8a8f-751f364e7c5f.roa File: 5a7f92be-66b2-3204-8a8f-751f364e7c5f.roa (raw, json) Hash identifier: AINgdRVIS4uNBBIXY764Xvjik9/14i7lgUivhIyDby4= Subject key identifier: AE:59:D6:37:B2:71:6D:5B:C0:A9:2E:3C:CD:7F:D5:12:86:3F:77:7A Certificate issuer: /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Certificate serial: 010D0C9F432858487755DBD4DA787506C34E1740 Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/5a7f92be-66b2-3204-8a8f-751f364e7c5f.roa Signing time: Tue 07 Jan 2025 14:00:53 +0000 ROA not before: Tue 07 Jan 2025 14:00:53 +0000 ROA not after: Mon 07 Apr 2025 13:00:53 +0000 asID: 16509 IP address blocks: 170.225.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:77:55:db:d4:da:78:75:06:c3:4e:17:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Validity Not Before: Jan 7 14:00:53 2025 GMT Not After : Apr 7 13:00:53 2025 GMT Subject: CN=42f768ad-7df4-4fcd-8d86-165f329d8427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f0:1d:96:a9:c6:a6:f0:33:db:37:1b:54:06: ab:d1:74:03:a0:65:36:a8:56:80:9f:24:79:65:65: 03:7c:9e:ad:6c:d1:b2:23:3e:f6:fb:50:e1:8f:23: c7:ab:ee:5f:4a:ff:04:34:56:f3:d0:e7:85:94:e3: 79:43:5f:3f:20:36:2c:ea:d5:47:d0:2e:6f:32:41: 1e:68:b6:7f:f5:cf:e1:8a:61:a3:21:4e:3c:47:6a: 6b:13:9f:e4:82:d7:21:c3:75:b5:77:29:64:48:3d: 2c:8a:b4:a2:8a:9c:ef:0d:2a:1d:ee:a5:40:be:e7: cb:f0:cd:7a:7d:91:df:26:c6:75:85:16:e6:b1:6e: c1:c0:88:23:16:5b:0c:66:8f:a8:e2:c2:f1:d6:20: d9:99:08:09:09:fa:5a:0c:e0:69:46:d9:0b:d9:a2: 4e:19:11:c6:a2:07:97:72:d0:8c:3b:27:d0:a2:29: 53:25:95:13:fa:0d:11:e4:83:20:28:0f:b4:a3:67: c7:1e:5a:43:0b:1d:8e:2b:9f:cf:6d:ad:cf:f1:6e: 3f:16:4c:23:f5:1f:23:26:3d:56:f1:7c:f0:2e:7e: 99:19:f3:51:59:88:f8:53:b3:41:94:37:80:2c:c2: 1d:c3:e1:03:28:d9:5b:ba:85:5f:40:74:74:70:36: b8:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:59:D6:37:B2:71:6D:5B:C0:A9:2E:3C:CD:7F:D5:12:86:3F:77:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/5a7f92be-66b2-3204-8a8f-751f364e7c5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl X509v3 Authority Key Identifier: keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer sbgp-ipAddrBlock: critical IPv4: 170.225.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:2e:da:c1:03:56:2f:98:1e:4b:df:a6:98:82:3a:eb:c2:6a: 07:5d:e4:35:33:c3:ae:7f:0e:2d:b7:85:47:ec:36:ed:2b:e4: 9d:0c:a2:f6:b7:16:b8:80:98:e1:9c:b2:67:5e:36:0e:34:05: ed:d9:79:3a:32:af:68:9e:95:0b:6a:63:8e:b3:c5:3d:45:88: 00:1d:80:28:c9:8d:bb:ab:c8:96:b6:f3:0c:6b:94:1e:fd:01: 64:ca:43:2d:83:fc:46:96:b8:04:96:2b:1b:62:9a:1f:82:b0: 0e:0c:79:7c:40:ce:5c:55:0e:54:f1:2f:21:1a:a2:57:a1:c1: ce:b4:4f:87:0e:4c:76:64:2f:83:5c:ee:a1:23:0c:39:b6:a0: ce:39:3f:bb:05:e4:02:e6:6c:7f:68:44:3e:51:1a:e7:cc:c6: 15:18:fd:49:b8:a2:69:9f:d9:8b:b9:fe:36:07:75:ff:d4:de: f6:e1:e9:e1:2f:5b:c2:36:2c:af:7d:41:dc:db:c6:68:fb:72: ed:b2:2a:cd:e2:8b:da:83:55:12:a2:64:94:65:d1:9d:71:8e: 14:0d:f3:32:32:b6:52:07:11:e5:5f:ae:63:20:30:ae:2c:f1: 43:dc:fe:7d:f3:4d:0b:d8:d6:28:ff:61:69:b8:8a:83:8b:4e: e5:99:98:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh3VdvU2nh1BsNOF0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNjOTdkOTYtNTJkMC00OGE3LWE5ZWEtYTc3NDlkYzA4 Mjc5MB4XDTI1MDEwNzE0MDA1M1oXDTI1MDQwNzEzMDA1M1owLzEtMCsGA1UEAxMk NDJmNzY4YWQtN2RmNC00ZmNkLThkODYtMTY1ZjMyOWQ4NDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/AdlqnGpvAz2zcbVAar0XQDoGU2qFaAnyR5 ZWUDfJ6tbNGyIz72+1DhjyPHq+5fSv8ENFbz0OeFlON5Q18/IDYs6tVH0C5vMkEe aLZ/9c/himGjIU48R2prE5/kgtchw3W1dylkSD0sirSiipzvDSod7qVAvufL8M16 fZHfJsZ1hRbmsW7BwIgjFlsMZo+o4sLx1iDZmQgJCfpaDOBpRtkL2aJOGRHGogeX ctCMOyfQoilTJZUT+g0R5IMgKA+0o2fHHlpDCx2OK5/Pba3P8W4/Fkwj9R8jJj1W 8XzwLn6ZGfNRWYj4U7NBlDeALMIdw+EDKNlbuoVfQHR0cDa4WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK5Z1jeycW1bwKkuPM1/1RKGP3d6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5 N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0OWRjMDgyNzkvNWE3ZjkyYmUtNjZiMi0z MjA0LThhOGYtNzUxZjM2NGU3YzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGNjOTdkOTYtNTJkMC00OGE3LWE5 ZWEtYTc3NDlkYzA4Mjc5LzRjYzk3ZDk2LTUyZDAtNDhhNy1hOWVhLWE3NzQ5ZGMw ODI3OS5jcmwwHwYDVR0jBBgwFoAU4vrUb8NLZY1545Z6Y6GWz7mMjdUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0 OWRjMDgyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAquHYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsu2sEDVi+YHkvfppiCOuvCagdd5DUzw65/Di23hUfsNu0r5J0Mova3 FriAmOGcsmdeNg40Be3ZeToyr2ielQtqY46zxT1FiAAdgCjJjburyJa28wxrlB79 AWTKQy2D/EaWuASWKxtimh+CsA4MeXxAzlxVDlTxLyEaolehwc60T4cOTHZkL4Nc 7qEjDDm2oM45P7sF5ALmbH9oRD5RGufMxhUY/Um4ommf2Yu5/jYHdf/U3vbh6eEv W8I2LK99Qdzbxmj7cu2yKs3ii9qDVRKiZJRl0Z1xjhQN8zIytlIHEeVfrmMgMK4s 8UPc/n3zTQvY1ij/YWm4ioOLTuWZmNM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:52:48 2025 by rpki-client